$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BD9FC7C4707F11EDBD17DD28C4F9AE02.roa File: BD9FC7C4707F11EDBD17DD28C4F9AE02.roa (raw, json) Hash identifier: DsDyu/qdLDuGh2vqG5nWK3AVRpzQ90DBj9cQIus0csA= Subject key identifier: A3:36:40:3C:85:E9:54:CE:91:60:60:11:49:57:EA:8E:97:74:1F:90 Certificate issuer: /CN=A91D1136/serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Certificate serial: 2679 Authority key identifier: B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BD9FC7C4707F11EDBD17DD28C4F9AE02.roa Signing time: Tue 02 Sep 2025 16:04:09 +0000 ROA not before: Tue 02 Sep 2025 16:04:09 +0000 ROA not after: Tue 01 Dec 2026 00:00:00 +0000 asID: 138915 IP address blocks: 2404:8d04:2642::/48 maxlen: 48 Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 11 Sep 2025 15:49:47 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 9849 (0x2679) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91D1136, serialNumber=B7B73E89B621081609CD689AB0AEF7FAF148926C Validity Not Before: Sep 2 16:04:09 2025 GMT Not After : Dec 1 00:00:00 2026 GMT Subject: CN=68b71579-cc52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d9:6f:3f:1b:20:d7:87:e4:00:2d:c1:17:db:25: ee:ec:37:12:df:2d:bd:59:6c:14:51:ab:84:37:0b: 0c:5b:47:11:76:d1:1a:07:f8:59:b7:cc:cc:b9:02: 7f:0d:27:34:94:91:d9:c3:0c:7f:d2:63:4e:15:3e: 74:38:0d:ae:87:2b:0c:73:b2:44:a7:d1:c5:6b:b2: 2a:72:e1:cb:8f:9e:24:ea:39:ec:38:fb:93:ea:81: d6:b6:28:f8:03:37:ae:3c:04:31:57:5a:78:d9:3d: 46:01:0d:f2:fc:b9:3b:dc:2a:4a:d1:81:e7:31:32: 46:06:a6:52:35:8a:ae:de:d3:c3:9a:5b:04:c9:0e: da:50:eb:3e:95:6d:e0:61:df:1f:e8:b9:a1:57:17: 22:d6:8e:78:31:7b:cd:7f:62:57:97:74:99:6c:d1: 28:81:f3:04:e5:53:3c:10:3b:4b:5f:e8:54:1b:33: ac:d9:06:00:65:11:70:2f:c8:e1:25:70:66:26:03: a0:6c:f4:5f:aa:ad:8a:11:a0:1b:3a:10:ca:fa:aa: 5b:12:18:f0:02:29:49:06:9f:7a:dd:fc:44:07:2a: a8:9e:3d:86:80:e9:92:67:ce:97:ce:79:65:e5:7d: 11:b1:09:91:d4:e4:c8:a5:1b:60:45:a6:9a:72:d3: 8d:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A3:36:40:3C:85:E9:54:CE:91:60:60:11:49:57:EA:8E:97:74:1F:90 X509v3 Authority Key Identifier: keyid:B7:B7:3E:89:B6:21:08:16:09:CD:68:9A:B0:AE:F7:FA:F1:48:92:6C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/t7c-ibYhCBYJzWiasK73-vFIkmw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t7c-ibYhCBYJzWiasK73-vFIkmw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1136/CF3281C8215B11E5A7BF890EC4F9AE02/BD9FC7C4707F11EDBD17DD28C4F9AE02.roa RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-ipAddrBlock: critical IPv6: 2404:8d04:2642::/48 Signature Algorithm: sha256WithRSAEncryption a2:b3:f4:2e:b8:3c:19:7b:9d:d6:e7:70:6d:51:16:0d:7b:f4: f8:80:bd:3a:91:16:12:6c:00:ef:be:aa:b2:5d:db:f3:0e:b7: 5b:65:e6:fc:16:42:62:a0:13:5a:02:8b:ad:42:81:3d:31:3d: 9d:f5:91:34:3b:b4:54:1f:06:c3:06:85:0f:c1:07:a6:a6:de: c0:7e:84:b7:76:41:28:c7:aa:dc:f6:4a:e5:b1:4d:74:17:6b: 12:26:fa:41:4f:50:3a:3e:ff:25:fb:f2:3c:c4:82:ca:99:7c: 8c:58:c9:10:a5:7b:77:d2:c7:95:08:cb:7e:8b:74:2c:46:30: 33:30:11:ed:6d:42:f3:5c:e0:94:bc:84:d3:e6:7c:93:d1:e1: 55:3c:19:59:8d:03:2f:df:7a:85:eb:91:fe:84:3a:7f:74:bd: f9:3b:8e:d8:d6:5d:dd:b7:06:32:61:95:58:6b:41:da:1e:74: 46:b3:7f:a8:52:a3:be:86:f6:a0:89:09:5a:41:04:48:84:f7: 25:2b:cd:4a:5f:7a:6d:f8:ce:25:bb:47:22:47:21:a7:7f:99: ee:4d:90:d4:e0:e2:c5:61:1d:bb:cc:6d:14:3a:14:78:df:d6: 1c:02:81:89:47:98:5c:37:a2:c1:89:5b:09:c5:69:c5:34:e6: ed:b2:11:b6 -----BEGIN CERTIFICATE----- MIIFdDCCBFygAwIBAgICJnkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RDExMzYxMTAvBgNVBAUTKEI3QjczRTg5QjYyMTA4MTYwOUNENjg5QUIwQUVGN0ZB RjE0ODkyNkMwHhcNMjUwOTAyMTYwNDA5WhcNMjYxMjAxMDAwMDAwWjAYMRYwFAYD VQQDEw02OGI3MTU3OS1jYzUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEA2W8/GyDXh+QALcEX2yXu7DcS3y29WWwUUauENwsMW0cRdtEaB/hZt8zMuQJ/ DSc0lJHZwwx/0mNOFT50OA2uhysMc7JEp9HFa7IqcuHLj54k6jnsOPuT6oHWtij4 AzeuPAQxV1p42T1GAQ3y/Lk73CpK0YHnMTJGBqZSNYqu3tPDmlsEyQ7aUOs+lW3g Yd8f6LmhVxci1o54MXvNf2JXl3SZbNEogfME5VM8EDtLX+hUGzOs2QYAZRFwL8jh JXBmJgOgbPRfqq2KEaAbOhDK+qpbEhjwAilJBp963fxEByqonj2GgOmSZ86Xznll 5X0RsQmR1OTIpRtgRaaactONcwIDAQABo4ICmDCCApQwHQYDVR0OBBYEFKM2QDyF 6VTOkWBgEUlX6o6XdB+QMB8GA1UdIwQYMBaAFLe3Pom2IQgWCc1omrCu9/rxSJJs MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMTEzNi9DRjMyODFDODIx NUIxMUU1QTdCRjg5MEVDNEY5QUUwMi90N2MtaWJZaENCWUp6V2lhc0s3My12Rklr bXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL3Q3Yy1pYlloQ0JZSnpXaWFzSzczLXZGSWttdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHLBggrBgEFBQcBCwSBvjCBuzCBgwYIKwYBBQUH MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx RDExMzYvQ0YzMjgxQzgyMTVCMTFFNUE3QkY4OTBFQzRGOUFFMDIvQkQ5RkM3QzQ3 MDdGMTFFREJEMTdERDI4QzRGOUFFMDIucm9hMDMGCCsGAQUFBzANhidodHRwczov L3JyZHAuYXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwIgYIKwYBBQUHAQcBAf8E EzARMA8EAgACMAkDBwAkBI0EJkIwDQYJKoZIhvcNAQELBQADggEBAKKz9C64PBl7 ndbncG1RFg179PiAvTqRFhJsAO++qrJd2/MOt1tl5vwWQmKgE1oCi61CgT0xPZ31 kTQ7tFQfBsMGhQ/BB6am3sB+hLd2QSjHqtz2SuWxTXQXaxIm+kFPUDo+/yX78jzE gsqZfIxYyRCle3fSx5UIy36LdCxGMDMwEe1tQvNc4JS8hNPmfJPR4VU8GVmNAy/f eoXrkf6EOn90vfk7jtjWXd23BjJhlVhrQdoedEazf6hSo76G9qCJCVpBBEiE9yUr zUpfem34ziW7RyJHIad/me5NkNTg4sVhHbvMbRQ6FHjf1hwCgYlHmFw3osGJWwnF acU05u2yEbY= -----END CERTIFICATE-----Generated at Fri Sep 5 08:57:13 2025 by rpki-client